Kaspersky recently conducted a study titled “Cybersecurity in the Workplace: Employee Knowledge and Behaviors,” which included the United Arab Emirates. The findings revealed that 88% of employees in the UAE utilize artificial intelligence tools for their work. However, only 41% of these employees have received training on cybersecurity aspects related to AI, which are critical for protecting against risks associated with AI usage, such as data leaks and malicious AI command injections.
The survey indicated that 94% of participants in the UAE understood the term “generative AI,” and this knowledge had extended beyond theoretical understanding, as AI tools have become an essential part of their daily lives. A significant 88% of respondents reported using AI tools at work, with 63% employing them for writing and editing texts, 64% for drafting work-related emails, 43% for creating images and videos with AI, and 44% for data analysis.
The survey highlighted a significant gap in employee readiness to handle AI-related risks; 26% of workers indicated they had received no training related to AI. Among those who had attended training courses in this field, 55% reported that the focus was on effective usage of AI tools and command creation, while only 41% had received training specifically addressing cybersecurity related to AI use.
Although AI tools that facilitate daily task automation are becoming increasingly common in organizations, they often exist as part of “shadow IT,” particularly when employees use them without guidance from their companies. In this context, 77% of participants stated that the use of generative AI tools is permitted in their workplaces, while 17% said it is prohibited, and 6% expressed uncertainty regarding their company’s stance on the matter.
To ensure that employees’ use of AI is safer and more transparent, companies should implement a comprehensive policy regarding this issue. Such a policy would prohibit the use of AI for specific roles and types of data and could govern which AI tools are accessible to employees, allowing only the use of those from a company-approved list. It is essential for this policy to be documented formally, with employees undergoing appropriate training. Once companies establish safety protocols and regulations, they should monitor AI usage, identify common services, and leverage this information to inform future actions and enhance security measures.
As Rashid Al-Momani, General Manager for the Middle East at Kaspersky, states: “There should neither be a complete ban nor unrestricted use of AI across all departments of the company. The most effective strategy is to adopt a balanced policy that allows employees varying levels of access to AI, depending on the sensitivity of the data in each department. Coupled with appropriate training, this will increase efficiency and flexibility while maintaining robust security standards.”
• Ensure that employees are trained on the responsible use of AI. AI security training courses, available on Kaspersky’s security awareness platform, enhance corporate educational programs with specialized training.
• Equip all IT professionals with the required knowledge about exploitation techniques and practical defense strategies. Kaspersky offers training on “Security for Large Language Models” as part of its cybersecurity training suite, which also promotes the overall professional development and cybersecurity posture of the organization.
• Confirm that employees install cybersecurity solutions on their personal and professional devices used to access business data. Kaspersky Next products protect users from various threats, including phishing or the installation of fake AI tools, especially given the rising number of criminals integrating information-stealing software into deceptive AI applications.
• Conduct regular surveys to monitor the frequency of AI utilization and related tasks. This information can help assess the benefits and risks of AI, allowing for adjustments to corporate policies accordingly.
• Implement a dedicated AI agent to filter employee queries in real-time, removing sensitive data such as names or customer IDs, and apply a role-based access control system to prevent unauthorized access.
• Develop a comprehensive policy addressing the various risks associated with AI. You can utilize Kaspersky’s guidance for the secure application of AI.
* The survey was conducted by Toluna Research in 2025 at Kaspersky’s request, involving 2,800 online video interviews with employees and business owners who utilize computers in their work across seven countries: Turkey, South Africa, Kenya, Pakistan, Egypt, Saudi Arabia, and the UAE.